$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cid9NoY3G1YHgN66cYkmNy9q_oE.roa File: Cid9NoY3G1YHgN66cYkmNy9q_oE.roa (raw, json) Hash identifier: MNCYZWtZPFXI0VgeiJvoRoAMbIx2AeNjEJS6FsinR1E= Subject key identifier: 0A:27:7D:36:86:37:1B:56:07:80:DE:BA:71:89:26:37:2F:6A:FE:81 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31F7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cid9NoY3G1YHgN66cYkmNy9q_oE.roa Signing time: Mon 26 Aug 2024 05:31:07 +0000 ROA not before: Mon 26 Aug 2024 05:31:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12791 (0x31f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A277D3686371B560780DEBA718926372F6AFE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:71:8e:76:05:23:18:36:b7:bb:f3:a7:4f: c5:59:94:c9:ee:a4:80:30:3f:53:02:ee:7c:ce:3e: 2c:a5:17:b9:8b:14:e7:9c:e3:22:fd:d7:35:81:89: c0:d8:28:ed:49:4f:18:3c:ae:da:52:8f:cb:38:12: b8:de:fa:80:9e:b2:55:b5:d9:08:97:7a:cc:7b:52: df:02:62:7e:b4:fb:e5:f7:f5:76:ca:ea:f2:18:f1: 2e:8a:19:c7:52:0f:97:45:34:07:c5:17:ec:f7:53: 8c:56:82:3d:1f:8c:2a:cc:22:f2:6e:51:03:0b:74: 9e:8f:b7:19:2d:23:33:0e:27:40:fe:1f:8b:e2:f9: 62:4b:e8:82:c7:5e:c7:cc:c7:a6:ad:ec:77:3b:3e: a7:61:19:b1:28:eb:88:1c:5a:dc:7e:62:eb:85:8f: a1:0f:3d:39:99:28:ad:9e:90:1b:05:40:98:8d:bb: 65:b4:a7:e2:f1:08:8e:2a:f3:22:f6:e6:a7:ac:d0: dc:f5:cb:aa:c9:03:c7:9d:a7:eb:6f:b4:e2:6b:f9: d9:b9:7e:18:35:e9:98:bd:64:eb:5b:4f:47:f1:d9: 82:06:1a:2f:59:7b:db:6b:55:63:46:da:62:1a:a6: 38:19:0b:57:2c:92:fd:72:64:5b:b6:c0:9b:c0:fd: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:27:7D:36:86:37:1B:56:07:80:DE:BA:71:89:26:37:2F:6A:FE:81 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cid9NoY3G1YHgN66cYkmNy9q_oE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.240.0/23 Signature Algorithm: sha256WithRSAEncryption 82:94:c6:e5:fe:69:4e:e4:e2:b3:e9:30:a9:42:5f:c2:ba:2a: a9:77:0b:13:00:e8:9a:07:45:cc:1a:e0:be:9f:da:73:6c:12: d4:c8:0c:c6:14:cd:c7:c5:f6:ad:dd:d1:88:c5:6d:fa:85:57: 7d:1f:92:03:62:c8:39:d4:2e:c0:a1:18:8f:d7:57:fd:55:bd: ba:68:39:13:ed:ee:75:46:ea:b1:d1:7c:e0:cb:48:f4:3e:c1: 35:d0:e5:94:5a:80:2c:cd:42:c0:ae:9a:3e:23:9a:3e:99:45: 30:b4:88:0a:40:cc:24:92:99:29:78:61:c9:8b:7d:a6:73:38: 7c:1c:8e:a0:38:7b:9e:8e:56:16:41:a9:40:b0:47:8b:f0:d5: 49:f0:3f:a5:03:9b:90:4e:48:e0:dc:c7:f0:7d:63:6e:ba:ae: 25:b2:3a:64:fb:48:34:6e:68:99:29:15:93:f0:3e:93:a7:a7: 61:ea:22:99:57:05:46:1a:fd:ac:c6:82:57:ee:80:84:bd:fe: 9f:09:2d:63:5d:46:32:ce:a6:25:f0:55:b8:c5:b4:9b:4d:9d: f4:8f:df:b8:a4:f3:3e:3a:0e:ee:d0:3e:20:f7:9c:97:ca:c2: 7e:d0:c4:16:ef:9f:c4:fc:e2:c1:c3:99:68:07:cd:5c:e0:76: e2:da:d6:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBMjc3RDM2ODYzNzFC NTYwNzgwREVCQTcxODkyNjM3MkY2QUZFODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR0nGOdgUjGDa3u/OnT8VZlMnupIAwP1MC7nzOPiylF7mLFOec 4yL91zWBicDYKO1JTxg8rtpSj8s4Erje+oCeslW12QiXesx7Ut8CYn60++X39XbK 6vIY8S6KGcdSD5dFNAfFF+z3U4xWgj0fjCrMIvJuUQMLdJ6PtxktIzMOJ0D+H4vi +WJL6ILHXsfMx6at7Hc7PqdhGbEo64gcWtx+YuuFj6EPPTmZKK2ekBsFQJiNu2W0 p+LxCI4q8yL25qes0Nz1y6rJA8edp+tvtOJr+dm5fhg16Zi9ZOtbT0fx2YIGGi9Z e9trVWNG2mIapjgZC1cskv1yZFu2wJvA/UhRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCid9NoY3G1YHgN66cYkmNy9q/oEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NpZDlOb1kzRzFZSGdONjZj WWttTnk5cV9vRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fAwDQYJKoZIhvcNAQELBQADggEBAIKUxuX+aU7k4rPpMKlCX8K6Kql3CxMA6JoH Rcwa4L6f2nNsEtTIDMYUzcfF9q3d0YjFbfqFV30fkgNiyDnULsChGI/XV/1Vvbpo ORPt7nVG6rHRfODLSPQ+wTXQ5ZRagCzNQsCumj4jmj6ZRTC0iApAzCSSmSl4YcmL faZzOHwcjqA4e56OVhZBqUCwR4vw1UnwP6UDm5BOSODcx/B9Y266riWyOmT7SDRu aJkpFZPwPpOnp2HqIplXBUYa/azGglfugIS9/p8JLWNdRjLOpiXwVbjFtJtNnfSP 37ik8z46Du7QPiD3nJfKwn7QxBbvn8T84sHDmWgHzVzgduLa1uc= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org